USN-3770-1: Little CMS vulnerabilities
Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/liblcms2-2to a version that resolves this vulnerability.Fixed in 2.9-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/liblcms2-utilsto a version that resolves this vulnerability.Fixed in 2.9-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/liblcms2-2to a version that resolves this vulnerability.Fixed in 2.6-3ubuntu2.1 - Upgrade
Upgrade
ubuntu/liblcms2-utilsto a version that resolves this vulnerability.Fixed in 2.6-3ubuntu2.1 - Upgrade
Upgrade
ubuntu/liblcms2-2to a version that resolves this vulnerability.Fixed in 2.5-0ubuntu4.2 - Upgrade
Upgrade
ubuntu/liblcms2-utilsto a version that resolves this vulnerability.Fixed in 2.5-0ubuntu4.2
Event History
Frequently Asked Questions
What is the severity of USN-3770-1?
The severity of USN-3770-1 is categorized as a potential denial of service vulnerability.
How do I fix USN-3770-1?
To fix USN-3770-1, upgrade your liblcms2-2 and liblcms2-utils packages to the recommended versions.
Which systems are affected by USN-3770-1?
USN-3770-1 affects Ubuntu versions 14.04, 16.04, and 18.04 that have specific versions of liblcms2.
What component is primarily affected by USN-3770-1?
The primary component affected by USN-3770-1 is the Little CMS library, specifically liblcms2.
Can USN-3770-1 lead to remote exploitation?
USN-3770-1 does not indicate remote exploitation capabilities; it is primarily a denial of service risk.